CVE-2013-4250
1 advisory.
Packagist/typo3/cms CVE-2013-4250: high, EPSS 1.15%
TYPO3 doesn't properly check file extensions
Action: Upgrade typo3/cms to 6.0.8 or later.
composer require typo3/cms:6.0.8composer require typo3/cms:6.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 6.0.8 | - |
| 6.1.0 | 6.1.3 | - |
Fixed versions
| 6.0.8 | 6.1.3 |
Sources
- osv: GHSA-54jj-pxx2-pv8h
- https://nvd.nist.gov/vuln/detail/CVE-2013-4250
- https://github.com/TYPO3/typo3
- https://typo3.org/security/advisory/typo3-core-sa-2013-002
CVE-2013-4250 · published · modified · JSON